smol-symphony 0.2.0 → 0.3.0

package/dist/src/shell/runner-loop.js

@@ -0,0 +1,338 @@
+// FCIS rewrite — imperative shell: the per-attempt runner loop driver.
+//
+// Ports the original `src/agent/runner.ts:runAttempt` phase pipeline (read for
+// reference, never modified). This is the THIN imperative shell: every routing /
+// precedence / classification DECISION lives in the functional core
+// (src/core/runner/{dispatch-config,injection,vm-plan,turn}.ts and
+// src/core/actions/run-fold.ts). The shell only EXECUTES: it sequences the
+// phases, drives real IO through the injected ports, and owns the per-attempt
+// unwind (teardown safety net).
+//
+// Per the FCIS layout rule, a shell module imports from src/types ONLY (the
+// composition root is the one place core is wired in). So the pure-core decision
+// functions this loop needs are INJECTED through `RunnerLoopCore` — the
+// composition root (src/shell/main.ts) binds the real core fns to it. The ports
+// (WorkspacePort, VmClient, AcpPort, IssueTracker, …) come from src/types/ports.
+//
+// Phase pipeline (faithful to the reference runAttemptCore):
+//   1. resolve dispatch config  (core: resolveDispatchConfig — pinned ONCE)
+//   2. workspace setup          (WorkspacePort.ensureFor + fetchBaseInWorkspace)
+//   3. adapter prep             (AdapterRegistry + core: applyRuntimeInjections)
+//   4. validate ACP transport   (core: buildControlPlaneTunnel)
+//   5. VM bring-up from VmPlan   (core: buildVmPlan → VmBringUp/GondolinDispatcher)
+//   6. ACP session              (AcpPort.sessionNew)
+//   7. turn loop                (core: turn deciders) — drives AcpPort.runPrompt
+//   8. terminal actions         (core: run-fold) — the per-state cleanup block
+//   9. teardown safety net      (close VM + deregister secret manager; idempotent)
+import { runTurnLoop } from './runner-loop-turn.js';
+/** Fail a phase: same shape the reference `failPhase` returned. */
+function fail(reason) {
+    return { ok: false, reason, threadId: null, turnsCompleted: 0 };
+}
+/**
+ * Drive one attempt for `issue`. Mirrors the reference runAttempt: a strict
+ * phase pipeline where any phase failure short-circuits to a RunAttemptResult,
+ * and a teardown safety net guarantees the VM + per-VM secret registration are
+ * released on every exit path (idempotent — teardown guards re-entry).
+ */
+export async function runAttempt(deps, issue, attempt, cancelSignal, runningEntry) {
+    const log = deps.log.withIssue(issue.id);
+    // Phases 1–5 (config → workspace → injection → VmPlan): all pure failures
+    // short-circuit before any VM exists, so no teardown is owed yet.
+    const prep = await prepareAttempt(deps, issue, runningEntry, log);
+    if (prep.kind === 'fail')
+        return fail(prep.reason);
+    const { resolved, adapterId, workspacePath, plan, launchEnv } = prep;
+    // Bring the VM up through the SINGLE dispatch path (the real GondolinDispatcher:
+    // it stages the plan's guest files — INCLUDING the /opt/symphony/vm-agent.mjs
+    // launcher — builds the { tcp: { hosts }, dns } tunnel shape, runs the BYO probe +
+    // the credential-mount guard, and LAUNCHES the in-VM agent, returning its live
+    // exec). After bring-up succeeds ONLY this attempt's teardown can release the
+    // handle + the per-VM secret registration, so every post-bring-up exit path runs
+    // through `unwind` (reference runSessionOrTeardown).
+    let brought;
+    try {
+        brought = await deps.bringUp.bringUp({
+            issue,
+            adapterId,
+            plan,
+            launchEnv,
+            workspacePath,
+            onStderr: (chunk) => pipeStderrChunk(deps, issue, chunk),
+        });
+    }
+    catch (err) {
+        log.emit('error', 'gondolin dispatch failed', { error: err.message });
+        return fail('gondolin dispatch error');
+    }
+    const vm = brought.vm;
+    // From here every failure path MUST tear the VM down. `unwind` is idempotent (the
+    // bring-up handle's teardown guards re-entry: kill exec + close VM + deregister).
+    let teardownDone = false;
+    const unwind = async (reason) => {
+        if (teardownDone)
+            return;
+        teardownDone = true;
+        deps.runlog.system(issue.id, 'vm_teardown', { reason });
+        // Unpark any awaiting steering reply by EMITTING a steering.cancel Effect through the
+        // central interpreter (the SAME seam the HTTP reply path uses), never poking the awaiter.
+        // Fire-and-forget: the cancel has no reply and execute() never rejects.
+        if (runningEntry)
+            void deps.performSteering({ family: 'steering', kind: 'cancel', identifier: runningEntry.identifier });
+        try {
+            await brought.teardown(reason);
+        }
+        catch (err) {
+            log.emit('warn', 'gondolin dispatch teardown threw', { error: err.message });
+        }
+    };
+    try {
+        // The in-VM agent is already launched by the bring-up; it dials back the /acp
+        // WebSocket and the host AcpPort completes the session over it.
+        return await runSession(deps, {
+            issue, runningEntry, resolved, adapterId, cancelSignal, attempt, workspacePath, vm, plan, log, unwind,
+        });
+    }
+    catch (err) {
+        // A post-bring-up step threw without unwinding. Release the VM before
+        // re-propagating (reference's runSessionOrTeardown catch).
+        await unwind('post_dispatch_failure');
+        throw err;
+    }
+}
+/**
+ * Phases 1–5 minus createVm: resolve dispatch config, set up the workspace,
+ * stage runtime injections + fake creds, and assemble the VmPlan. Every failure
+ * is returned as data (no VM exists yet, so no teardown is owed).
+ */
+async function prepareAttempt(deps, issue, runningEntry, log) {
+    // ── Phase 1: dispatch config (pinned ONCE; reload can't redirect it) ────────
+    const resolved = deps.core.resolveDispatchConfig(deps.cfg, issue.state);
+    if (resolved instanceof Error) {
+        log.emit('error', 'dispatch resolution failed', { error: resolved.message, state: issue.state });
+        return { kind: 'fail', reason: 'dispatch resolution error' };
+    }
+    if (!deps.adapters.isKnown(resolved.adapter)) {
+        log.emit('error', 'unknown acp adapter for state', { adapter: resolved.adapter, state: issue.state });
+        return { kind: 'fail', reason: 'unknown acp adapter' };
+    }
+    const adapterId = resolved.adapter;
+    // ── Phase 2: workspace setup (ensureFor + pre-dispatch base fetch) ──────────
+    // Use repo/base pinned at dispatch so a mid-run WORKFLOW.yaml reload can't
+    // retarget the workspace origin / PR base (reference setupSnapshot).
+    const githubRepo = runningEntry?.github_repo_at_dispatch || deps.cfg.workspace.github_repo;
+    const baseBranch = runningEntry?.base_branch_at_dispatch || deps.cfg.workspace.base_branch;
+    const ws = await setupWorkspace(deps, issue, baseBranch, githubRepo, log);
+    if (ws === null)
+        return { kind: 'fail', reason: 'workspace error' };
+    if (ws.fetchFailed)
+        return { kind: 'fail', reason: 'pre-dispatch base fetch failed' };
+    // ── Phase 3+4+5: injections → fake creds → VmPlan ───────────────────────────
+    const built = await buildPlan(deps, issue, resolved, adapterId, ws.path, log);
+    if (built.kind === 'fail')
+        return built;
+    return { kind: 'ok', resolved, adapterId, workspacePath: ws.path, plan: built.plan, launchEnv: built.launchEnv };
+}
+/**
+ * Phases 3–5: stage the model/effort injections (pure fold) and per-adapter fake
+ * creds (host reads), then assemble the VmPlan in core. validateAcpTransport
+ * collapses into the plan's tunnel: a null acpWsGuestUrl means no reachable
+ * control plane → fail fast. Failures are returned as data.
+ */
+async function buildPlan(deps, issue, resolved, adapterId, workspacePath, log) {
+    let injected;
+    let fakeCreds;
+    try {
+        injected = deps.core.applyRuntimeInjections(deps.adapters.profile(adapterId), { model: resolved.model, effort: resolved.effort });
+    }
+    catch (err) {
+        log.emit('error', 'runtime injection staging failed', { adapter: adapterId, error: err.message });
+        return { kind: 'fail', reason: 'runtime injection staging error' };
+    }
+    try {
+        fakeCreds = await deps.credStager.stageFakeCreds(adapterId);
+    }
+    catch (err) {
+        log.emit('error', 'fake-cred staging failed', { adapter: adapterId, error: err.message });
+        return { kind: 'fail', reason: 'credential staging error' };
+    }
+    const { plan, launchEnv } = deps.core.buildVmPlan({
+        cfg: deps.cfg,
+        resolved,
+        identifier: issue.identifier,
+        workspacePath,
+        adapterBin: injected.adapterBin,
+        adapterArgs: injected.effectiveAdapterArgs,
+        runtimeEnv: injected.runtimeEnv,
+        runtimeExtraFiles: injected.runtimeExtraFiles,
+        fakeCreds,
+        launcherSource: deps.launcherSource,
+        // The symphony-bundled mise SYSTEM config (issue 209); core always stages it at
+        // /etc/mise/config.toml (mise provisioning is unconditional, issue 233).
+        miseSystemConfigSource: deps.miseSystemConfigSource,
+        // The SAME token the dispatch slice registered with the AcpWsRegistry BEFORE
+        // bring-up — so the launch env bearer matches the pending registration the guest
+        // dials back against (NOT a second, divergent `random.newToken()`).
+        acpToken: deps.acpToken,
+        resolvedNodeBin: deps.resolvedNodeBin,
+        boundMcpPort: deps.boundMcpPort,
+        allowWebSockets: deps.allowWebSockets(adapterId),
+        // The asset auto-converted from `gondolin.oci_image` (issue 206); core uses it
+        // as the boot imagePath only when the `gondolin.image` escape hatch is unset.
+        convertedImageSelector: deps.convertedImageSelector ?? null,
+        readEnv: deps.readEnv,
+    });
+    if (plan.tunnel.acpWsGuestUrl === null) {
+        log.emit('error', 'acp ws has no reachable guest dial-back URL', {
+            mcp_enabled: deps.cfg.mcp.enabled,
+            explicit_host_url: deps.cfg.mcp.explicit_host_url,
+        });
+        return { kind: 'fail', reason: 'acp ws url unavailable' };
+    }
+    return { kind: 'ok', plan, launchEnv };
+}
+/** Workspace ensure + pre-dispatch base fetch; null = ensure failed. */
+async function setupWorkspace(deps, issue, baseBranch, githubRepo, log) {
+    let path;
+    try {
+        path = (await deps.workspaces.ensureFor(issue.identifier, { baseBranch, githubRepo })).path;
+    }
+    catch (err) {
+        log.emit('error', 'workspace error', { error: err.message });
+        return null;
+    }
+    try {
+        await deps.workspaces.fetchBaseInWorkspace(path, baseBranch);
+        deps.runlog.system(issue.id, 'pre_dispatch_base_fetch_ok', { base_branch: baseBranch });
+    }
+    catch (err) {
+        log.emit('error', 'pre-dispatch base fetch failed; aborting attempt', {
+            base_branch: baseBranch,
+            error: err.message,
+        });
+        deps.runlog.system(issue.id, 'pre_dispatch_base_fetch_failed', {
+            base_branch: baseBranch,
+            error: err.message,
+        });
+        return { path, fetchFailed: true };
+    }
+    return { path, fetchFailed: false };
+}
+/** Phases 6–9: open the ACP session, run the turn loop, run terminal actions, tear down. */
+async function runSession(deps, a) {
+    // ── Phase 6: ACP session over the /acp WebSocket (dial-back) ────────────────
+    let sessionId;
+    try {
+        sessionId = (await deps.acp.sessionNew(a.vm.id, { mcpEnabled: deps.cfg.mcp.enabled })).sessionId;
+        deps.runlog.system(a.issue.id, 'acp_ws_connected', { acp_url: a.plan.tunnel.acpWsGuestUrl });
+    }
+    catch (err) {
+        a.log.emit('error', 'acp init failed', { error: err.message, adapter: a.adapterId });
+        await a.unwind('init_failed');
+        return fail('agent session startup error');
+    }
+    // ── Phase 7: autonomous turn loop ───────────────────────────────────────────
+    const activeStates = new Set(deps.core.activeStateNames(deps.cfg.states).map((s) => s.toLowerCase()));
+    const loop = await runTurnLoop(deps, {
+        issue: a.issue,
+        runningEntry: a.runningEntry,
+        resolved: a.resolved,
+        adapterId: a.adapterId,
+        cancelSignal: a.cancelSignal,
+        attempt: a.attempt,
+        sessionId,
+        activeStates,
+        log: a.log,
+    });
+    // ── Phase 8: terminal-state actions (cleanup block; VM still alive) ─────────
+    const nonRouted = a.runningEntry ? await runTerminalActions(deps, a, a.runningEntry) : null;
+    // ── Phase 9: teardown + compose result ──────────────────────────────────────
+    await a.unwind(loop.kind === 'mid_failure' ? loop.cleanupReason : loop.lastReason);
+    if (loop.kind === 'mid_failure') {
+        return { ok: false, reason: loop.publicReason, threadId: sessionId, turnsCompleted: loop.turnsCompleted };
+    }
+    return deps.core.decideAttemptOutcome({
+        agentFailure: loop.agentFailure,
+        nonRoutedActionFailureReason: nonRouted,
+        lastReason: loop.lastReason,
+        sessionId,
+        turnsCompleted: loop.turnsCompleted,
+    });
+}
+/**
+ * Phase 8: run the issue's state `actions:` block (the VM is still alive so a
+ * `run_in_vm` action can exec into it), then RETAIN the workspace on any failed
+ * handoff. Returns the non-routed (abort) failure reason for the attempt outcome;
+ * a route — the issue already moved out into the HandoffFailed holding state (235) —
+ * returns null (a clean attempt). The workspace is marked for retention (234's
+ * handoff-pending marker) whenever the handoff failed at all, routed OR aborted, so
+ * the only copy of the completed commit survives for a manual push.
+ */
+async function runTerminalActions(deps, a, entry) {
+    const actionState = entry.issue.state ?? a.issue.state;
+    let nonRouted = null;
+    let markHandoffReason = null;
+    try {
+        const run = await deps.actions.runStateActions({ state: actionState, entry, workspacePath: a.workspacePath, vm: a.vm });
+        nonRouted = run.nonRouted;
+        markHandoffReason = run.markHandoffReason;
+    }
+    catch (err) {
+        nonRouted = err.message;
+        markHandoffReason = nonRouted;
+    }
+    if (markHandoffReason !== null)
+        await markHandoffIfTerminal(deps, a, actionState, markHandoffReason);
+    return nonRouted;
+}
+/**
+ * On a terminal-state phase-8 handoff FAILURE, drop the workspace's handoff-pending
+ * marker so the janitor RETAINS the dir (the only copy of the completed commit lives
+ * there) instead of reaping it ~5 min later — turning a recoverable push failure into
+ * permanent loss (issue 234). No-op for a non-terminal state (its workspace is desired,
+ * never reaped). Best-effort: a marker-write failure never changes the attempt outcome.
+ */
+async function markHandoffIfTerminal(deps, a, state, reason) {
+    if (!isTerminalState(deps.cfg, state))
+        return;
+    try {
+        await deps.workspaces.markHandoffPending(a.issue.identifier, reason);
+        deps.runlog.system(a.issue.id, 'handoff_marker_written', { state, reason });
+    }
+    catch (err) {
+        a.log.emit('warn', 'failed to write handoff-pending marker', { error: err.message });
+    }
+}
+/** Case-insensitive terminal-role check: the issue's front-matter state may differ in
+ *  casing from the declared state key (mirrors core/state-resolve.ts's resolution). */
+function isTerminalState(cfg, state) {
+    const exact = cfg.states[state];
+    if (exact)
+        return exact.role === 'terminal';
+    const lower = state.toLowerCase();
+    for (const [name, sc] of Object.entries(cfg.states)) {
+        if (name.toLowerCase() === lower)
+            return sc.role === 'terminal';
+    }
+    return false;
+}
+/**
+ * The diagnostic-stderr sink: fold ONE chunk of the in-VM agent's stderr into the
+ * run log. Mirrors the reference `onAgentStderr` (truncated runtime event + run-log
+ * record). The bring-up (GondolinDispatcher) owns the stream tap and hands each
+ * chunk here. Fire-and-forget — failures here never fail the attempt.
+ */
+function pipeStderrChunk(deps, issue, chunk) {
+    try {
+        const entry = { channel: 'stderr', text: chunk };
+        deps.runlog.record(issue.id, entry);
+        const text = chunk.trim();
+        if (text.length === 0)
+            return;
+        deps.log.withIssue(issue.id).emit('info', 'agent stderr', { text: text.slice(0, 500) });
+    }
+    catch {
+        // Best-effort tap; a malformed chunk just yields no record.
+    }
+}
+//# sourceMappingURL=runner-loop.js.map

package/dist/src/shell/runner-loop.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner-loop.js","sourceRoot":"","sources":["../../../src/shell/runner-loop.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,EAAE;AACF,+EAA+E;AAC/E,iFAAiF;AACjF,oEAAoE;AACpE,mEAAmE;AACnE,2EAA2E;AAC3E,8EAA8E;AAC9E,gCAAgC;AAChC,EAAE;AACF,4EAA4E;AAC5E,iFAAiF;AACjF,wEAAwE;AACxE,gFAAgF;AAChF,iFAAiF;AACjF,EAAE;AACF,6DAA6D;AAC7D,4EAA4E;AAC5E,iFAAiF;AACjF,iFAAiF;AACjF,gEAAgE;AAChE,oFAAoF;AACpF,qDAAqD;AACrD,iFAAiF;AACjF,+EAA+E;AAC/E,mFAAmF;AAenF,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAYpD,mEAAmE;AACnE,SAAS,IAAI,CAAC,MAAc;IAC1B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;AAClE,CAAC;AAcD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAoB,EACpB,KAAY,EACZ,OAAsB,EACtB,YAAoC,EACpC,YAA2B;IAE3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAEzC,0EAA0E;IAC1E,kEAAkE;IAClE,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC;IAClE,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAErE,iFAAiF;IACjF,8EAA8E;IAC9E,mFAAmF;IACnF,+EAA+E;IAC/E,8EAA8E;IAC9E,iFAAiF;IACjF,qDAAqD;IACrD,IAAI,OAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;YACnC,KAAK;YACL,SAAS;YACT,IAAI;YACJ,SAAS;YACT,aAAa;YACb,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC;SACzD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,0BAA0B,EAAE,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC;IAEtB,kFAAkF;IAClF,kFAAkF;IAClF,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,MAAM,MAAM,GAAG,KAAK,EAAE,MAAc,EAAiB,EAAE;QACrD,IAAI,YAAY;YAAE,OAAO;QACzB,YAAY,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACxD,sFAAsF;QACtF,0FAA0F;QAC1F,wEAAwE;QACxE,IAAI,YAAY;YAAE,KAAK,IAAI,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,CAAC,UAAU,EAAE,CAAC,CAAC;QACzH,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,kCAAkC,EAAE,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,8EAA8E;QAC9E,gEAAgE;QAChE,OAAO,MAAM,UAAU,CAAC,IAAI,EAAE;YAC5B,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM;SACtG,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,sEAAsE;QACtE,2DAA2D;QAC3D,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;QACtC,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,cAAc,CAC3B,IAAoB,EACpB,KAAY,EACZ,YAAsC,EACtC,GAAY;IAEZ,+EAA+E;IAC/E,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACxE,IAAI,QAAQ,YAAY,KAAK,EAAE,CAAC;QAC9B,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,4BAA4B,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QACjG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;IAC/D,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,+BAA+B,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QACtG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IACzD,CAAC;IACD,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAuB,CAAC;IAEnD,+EAA+E;IAC/E,2EAA2E;IAC3E,qEAAqE;IACrE,MAAM,UAAU,GAAG,YAAY,EAAE,uBAAuB,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC;IAC3F,MAAM,UAAU,GAAG,YAAY,EAAE,uBAAuB,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC;IAC3F,MAAM,EAAE,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;IAC1E,IAAI,EAAE,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACpE,IAAI,EAAE,CAAC,WAAW;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;IAEtF,+EAA+E;IAC/E,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC9E,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;AACnH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,SAAS,CACtB,IAAoB,EACpB,KAAY,EACZ,QAAgC,EAChC,SAAuB,EACvB,aAAqB,EACrB,GAAY;IAEZ,IAAI,QAA8D,CAAC;IACnE,IAAI,SAA4B,CAAC;IACjC,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACpI,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,kCAAkC,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7G,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IACrE,CAAC;IACD,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;IAC9D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,0BAA0B,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACrG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;IAC9D,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC;QAChD,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,QAAQ;QACR,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,aAAa;QACb,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,WAAW,EAAE,QAAQ,CAAC,oBAAoB;QAC1C,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;QAC7C,SAAS;QACT,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,gFAAgF;QAChF,yEAAyE;QACzE,sBAAsB,EAAE,IAAI,CAAC,sBAAsB;QACnD,6EAA6E;QAC7E,iFAAiF;QACjF,oEAAoE;QACpE,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,eAAe,EAAE,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC;QAChD,+EAA+E;QAC/E,8EAA8E;QAC9E,sBAAsB,EAAE,IAAI,CAAC,sBAAsB,IAAI,IAAI;QAC3D,OAAO,EAAE,IAAI,CAAC,OAAO;KACtB,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;QACvC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,6CAA6C,EAAE;YAC/D,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO;YACjC,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,iBAAiB;SAClD,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;IAC5D,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AACzC,CAAC;AAED,wEAAwE;AACxE,KAAK,UAAU,cAAc,CAC3B,IAAoB,EACpB,KAAY,EACZ,UAAkB,EAClB,UAAyB,EACzB,GAAY;IAEZ,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,EAAE,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,4BAA4B,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC;IAC1F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,kDAAkD,EAAE;YACpE,WAAW,EAAE,UAAU;YACvB,KAAK,EAAG,GAAa,CAAC,OAAO;SAC9B,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,gCAAgC,EAAE;YAC7D,WAAW,EAAE,UAAU;YACvB,KAAK,EAAG,GAAa,CAAC,OAAO;SAC9B,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACrC,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;AACtC,CAAC;AAgBD,4FAA4F;AAC5F,KAAK,UAAU,UAAU,CAAC,IAAoB,EAAE,CAAc;IAC5D,+EAA+E;IAC/E,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACjG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,kBAAkB,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC;IAC/F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,EAAE,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QAChG,MAAM,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC7C,CAAC;IAED,+EAA+E;IAC/E,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IACtG,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE;QACnC,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,YAAY,EAAE,CAAC,CAAC,YAAY;QAC5B,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,SAAS;QACT,YAAY;QACZ,GAAG,EAAE,CAAC,CAAC,GAAG;KACX,CAAC,CAAC;IAEH,+EAA+E;IAC/E,MAAM,SAAS,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,kBAAkB,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAE5F,+EAA+E;IAC/E,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACnF,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QAChC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC;IAC5G,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC;QACpC,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,4BAA4B,EAAE,SAAS;QACvC,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,SAAS;QACT,cAAc,EAAE,IAAI,CAAC,cAAc;KACpC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,kBAAkB,CAAC,IAAoB,EAAE,CAAc,EAAE,KAAmB;IACzF,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;IACvD,IAAI,SAAS,GAAkB,IAAI,CAAC;IACpC,IAAI,iBAAiB,GAAkB,IAAI,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACxH,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;QAC1B,iBAAiB,GAAG,GAAG,CAAC,iBAAiB,CAAC;IAC5C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,SAAS,GAAI,GAAa,CAAC,OAAO,CAAC;QACnC,iBAAiB,GAAG,SAAS,CAAC;IAChC,CAAC;IACD,IAAI,iBAAiB,KAAK,IAAI;QAAE,MAAM,qBAAqB,CAAC,IAAI,EAAE,CAAC,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC;IACrG,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,qBAAqB,CAAC,IAAoB,EAAE,CAAc,EAAE,KAAa,EAAE,MAAc;IACtG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC;QAAE,OAAO;IAC9C,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACrE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,wBAAwB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,wCAAwC,EAAE,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAClG,CAAC;AACH,CAAC;AAED;uFACuF;AACvF,SAAS,eAAe,CAAC,GAAkB,EAAE,KAAa;IACxD,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC;IAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACpD,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,KAAK;YAAE,OAAO,EAAE,CAAC,IAAI,KAAK,UAAU,CAAC;IAClE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CAAC,IAAoB,EAAE,KAAY,EAAE,KAAa;IACxE,IAAI,CAAC;QACH,MAAM,KAAK,GAAoB,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QAClE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC1B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC9B,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC1F,CAAC;IAAC,MAAM,CAAC;QACP,4DAA4D;IAC9D,CAAC;AACH,CAAC"}

package/dist/src/shell/server/http.js

@@ -0,0 +1,208 @@
+// FCIS rewrite — node:http transport adapter (kind: server).
+//
+// THIN imperative shell for the unified HTTP server. Implements `HttpServerPort`
+// (bind/stop) and does ONE job per request: read the wire (method, headers, body)
+// into an `HttpRequestView`, hand it to the injected `handle` (wired in the
+// composition root to core http/routes + http/decisions + http/views + http/render),
+// then write the `HttpResponseSpec` core returns. EVERY domain decision — route
+// matching, CSRF gating, create-issue validation, triage transitions, all HTML
+// rendering — lives in core; this file only moves bytes.
+//
+// It also hosts the two non-request concerns that are legitimately transport:
+//   • the `/acp` WebSocket `Upgrade` the in-VM agent dials back on (forwarded to
+//     the injected AcpWsRegistry.handleUpgrade — see src/shell/interp/acp-ws.ts);
+//   • `clientError` (a malformed request line / oversized header) → a raw
+//     `400 Bad Request` on the socket;
+//   • a malformed `Host`/request-URL that would otherwise throw inside `new URL`
+//     → a structured `400` JSON body (the critic gap the reference guards against
+//     at src/http.ts handleRequest).
+//
+// The preview asset (`.impeccable/preview/dashboard.html`) is served by the
+// injected `handle` itself: reading that file is async IO the composition-root
+// wiring performs, so the route stays core-owned while the read stays in the shell.
+//
+// Reference (read-only, do not edit): src/http.ts — startHttpServer / handleRequest.
+import { createServer } from 'node:http';
+const DEFAULT_MAX_BODY_BYTES = 1_000_000;
+/** A JSON error body in the reference's `{ error: { code, message } }` shape. */
+function jsonError(status, code, message) {
+    return {
+        status,
+        contentType: 'application/json; charset=utf-8',
+        body: JSON.stringify({ error: { code, message } }),
+    };
+}
+/** Drain the request body to a UTF-8 string, capping at `maxBytes`. Rejects on
+ *  overflow (the reference destroys the socket + surfaces "request body too
+ *  large"); core decides what an empty body means. */
+function readRawBody(req, maxBytes) {
+    return new Promise((resolve, reject) => {
+        const chunks = [];
+        let size = 0;
+        req.on('data', (chunk) => {
+            size += chunk.length;
+            if (size > maxBytes) {
+                req.destroy();
+                reject(new Error('request body too large'));
+                return;
+            }
+            chunks.push(chunk);
+        });
+        req.on('end', () => resolve(Buffer.concat(chunks).toString('utf8')));
+        req.on('error', reject);
+    });
+}
+/** Flatten node's `string | string[] | undefined` header values to a lowercased
+ *  single-string map (array headers collapse to their first value — none of the
+ *  headers core inspects are legitimately repeated). */
+function viewHeaders(req) {
+    const out = {};
+    for (const [k, v] of Object.entries(req.headers)) {
+        out[k.toLowerCase()] = Array.isArray(v) ? v[0] : v;
+    }
+    return out;
+}
+/** Write a `HttpResponseSpec` to the live `ServerResponse`. Sets content-type +
+ *  content-length and any extra headers core asked for (e.g. cache-control). */
+function writeSpec(res, spec) {
+    res.statusCode = spec.status;
+    res.setHeader('content-type', spec.contentType);
+    if (spec.headers) {
+        for (const [k, v] of Object.entries(spec.headers))
+            res.setHeader(k, v);
+    }
+    res.setHeader('content-length', Buffer.byteLength(spec.body));
+    res.end(spec.body);
+}
+/** Parse the request pathname, defending the listener against a malformed
+ *  `Host`/request-target that would throw inside `new URL` (the critic gap). */
+function parsePathname(req) {
+    try {
+        return new URL(req.url ?? '/', 'http://symphony.local').pathname;
+    }
+    catch {
+        return null;
+    }
+}
+async function handleRequest(req, res, deps, maxBytes) {
+    const pathname = parsePathname(req);
+    if (pathname === null) {
+        writeSpec(res, jsonError(400, 'bad_request', 'invalid request URL'));
+        return;
+    }
+    // Body is drained for every method; core ignores it for GET/HEAD. An overflow
+    // is the one read failure the transport owns — map it to a structured 400.
+    let rawBody;
+    try {
+        rawBody = await readRawBody(req, maxBytes);
+    }
+    catch (err) {
+        writeSpec(res, jsonError(400, 'bad_request', err.message));
+        return;
+    }
+    const view = {
+        method: (req.method ?? 'GET').toUpperCase(),
+        pathname,
+        headers: viewHeaders(req),
+        rawBody,
+    };
+    const spec = await deps.handle(view);
+    writeSpec(res, spec);
+}
+/**
+ * Build the node:http server adapter implementing `HttpServerPort`. Construction
+ * does not bind; `bind` listens (resolving the actually-bound port, relevant for
+ * a `--port 0` request) and `stop` closes the listener + tears down any pending
+ * `/acp` socket via the registry's own `stop` (the registry, not this file, owns
+ * upgraded-socket lifecycle).
+ */
+export function createHttpServer(deps) {
+    const maxBytes = deps.maxBodyBytes ?? DEFAULT_MAX_BODY_BYTES;
+    let server = null;
+    function build() {
+        const s = createServer((req, res) => {
+            void handleRequest(req, res, deps, maxBytes).catch((err) => {
+                deps.log.emit('error', 'http handler error', { error: err.message });
+                try {
+                    writeSpec(res, jsonError(500, 'internal_error', err.message));
+                }
+                catch {
+                    /* response already started — nothing safe to write */
+                }
+            });
+        });
+        // A malformed request line / oversized header never reaches handleRequest;
+        // node emits clientError instead. Mirror the reference: raw 400 on the wire.
+        s.on('clientError', (err, socket) => {
+            deps.log.emit('debug', 'http client error', { error: err.message });
+            try {
+                socket.end('HTTP/1.1 400 Bad Request\r\n\r\n');
+            }
+            catch {
+                /* socket may already be closed */
+            }
+        });
+        // The in-VM agent dials `ws://…/acp`; the registry completes the RFC-6455
+        // handshake + first-message bearer auth. No registry ⇒ refuse the upgrade by
+        // destroying the socket (an un-answered upgrade would otherwise hang the peer).
+        s.on('upgrade', (req, socket, head) => {
+            // Node types the upgrade socket as a bare Duplex; at runtime it is the
+            // underlying net.Socket the registry needs for setNoDelay / remote-address.
+            const sock = socket;
+            if (deps.acpUpgrade)
+                deps.acpUpgrade(req, sock, head);
+            else
+                sock.destroy();
+        });
+        return s;
+    }
+    return {
+        async bind(requestedPort, host) {
+            const s = build();
+            server = s;
+            const listenPort = requestedPort ?? 0;
+            await new Promise((resolve, reject) => {
+                const onError = (err) => {
+                    s.removeListener('listening', onListening);
+                    reject(err);
+                };
+                const onListening = () => {
+                    s.removeListener('error', onError);
+                    resolve();
+                };
+                s.once('error', onError);
+                s.once('listening', onListening);
+                s.listen(listenPort, host);
+            });
+            // After a clean bind, swap the fatal bind-error listener for a permanent
+            // one so later runtime socket faults (ENOTCONN, resets) log instead of
+            // crashing the process.
+            s.on('error', (err) => {
+                deps.log.emit('warn', 'http server error', { error: err.message });
+            });
+            const addr = s.address();
+            const port = typeof addr === 'object' && addr ? addr.port : listenPort;
+            deps.log.emit('info', 'http server listening', { host, port });
+            return { port };
+        },
+        async stop() {
+            const s = server;
+            if (!s)
+                return;
+            server = null;
+            // Force-close the registry's upgraded `/acp` sockets FIRST: server.close()
+            // only refuses new connections and resolves once existing ones drain, so a
+            // live WebSocket would otherwise hang the close() callback forever. The
+            // registry's stop() rejects pending registrations + destroys every tracked
+            // socket, letting the listener drain cleanly. Best-effort (never block the
+            // listener teardown on a registry fault).
+            if (deps.acpStop) {
+                await deps.acpStop().catch((err) => {
+                    deps.log.emit('warn', 'acp ws registry stop failed', { error: err.message });
+                });
+            }
+            await new Promise((resolve) => s.close(() => resolve()));
+        },
+    };
+}
+//# sourceMappingURL=http.js.map

package/dist/src/shell/server/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../../../src/shell/server/http.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,EAAE;AACF,iFAAiF;AACjF,kFAAkF;AAClF,4EAA4E;AAC5E,qFAAqF;AACrF,gFAAgF;AAChF,+EAA+E;AAC/E,yDAAyD;AACzD,EAAE;AACF,8EAA8E;AAC9E,iFAAiF;AACjF,kFAAkF;AAClF,0EAA0E;AAC1E,uCAAuC;AACvC,iFAAiF;AACjF,kFAAkF;AAClF,qCAAqC;AACrC,EAAE;AACF,4EAA4E;AAC5E,+EAA+E;AAC/E,oFAAoF;AACpF,EAAE;AACF,qFAAqF;AAErF,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAC;AAKjG,MAAM,sBAAsB,GAAG,SAAS,CAAC;AA6BzC,iFAAiF;AACjF,SAAS,SAAS,CAAC,MAAc,EAAE,IAAY,EAAE,OAAe;IAC9D,OAAO;QACL,MAAM;QACN,WAAW,EAAE,iCAAiC;QAC9C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC;KACnD,CAAC;AACJ,CAAC;AAED;;sDAEsD;AACtD,SAAS,WAAW,CAAC,GAAoB,EAAE,QAAgB;IACzD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC/B,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;YACrB,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;gBACpB,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC;gBAC5C,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrE,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;wDAEwD;AACxD,SAAS,WAAW,CAAC,GAAoB;IACvC,MAAM,GAAG,GAAuC,EAAE,CAAC;IACnD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;gFACgF;AAChF,SAAS,SAAS,CAAC,GAAmB,EAAE,IAAsB;IAC5D,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC;IAC7B,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IAChD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACzE,CAAC;IACD,GAAG,CAAC,SAAS,CAAC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED;gFACgF;AAChF,SAAS,aAAa,CAAC,GAAoB;IACzC,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,uBAAuB,CAAC,CAAC,QAAQ,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,GAAoB,EACpB,GAAmB,EACnB,IAAoB,EACpB,QAAgB;IAEhB,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,aAAa,EAAE,qBAAqB,CAAC,CAAC,CAAC;QACrE,OAAO;IACT,CAAC;IACD,8EAA8E;IAC9E,2EAA2E;IAC3E,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,aAAa,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC,CAAC;QACtE,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAoB;QAC5B,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE;QAC3C,QAAQ;QACR,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC;QACzB,OAAO;KACR,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACrC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACvB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAoB;IACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,IAAI,sBAAsB,CAAC;IAC7D,IAAI,MAAM,GAAkB,IAAI,CAAC;IAEjC,SAAS,KAAK;QACZ,MAAM,CAAC,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAClC,KAAK,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACzD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,oBAAoB,EAAE,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;gBAChF,IAAI,CAAC;oBACH,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,gBAAgB,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC3E,CAAC;gBAAC,MAAM,CAAC;oBACP,sDAAsD;gBACxD,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,2EAA2E;QAC3E,6EAA6E;QAC7E,CAAC,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,GAAU,EAAE,MAAc,EAAE,EAAE;YACjD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,mBAAmB,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACpE,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACP,kCAAkC;YACpC,CAAC;QACH,CAAC,CAAC,CAAC;QACH,0EAA0E;QAC1E,6EAA6E;QAC7E,gFAAgF;QAChF,CAAC,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;YACpC,uEAAuE;YACvE,4EAA4E;YAC5E,MAAM,IAAI,GAAG,MAAgB,CAAC;YAC9B,IAAI,IAAI,CAAC,UAAU;gBAAE,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;;gBACjD,IAAI,CAAC,OAAO,EAAE,CAAC;QACtB,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,CAAC;IACX,CAAC;IAED,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,aAA4B,EAAE,IAAY;YACnD,MAAM,CAAC,GAAG,KAAK,EAAE,CAAC;YAClB,MAAM,GAAG,CAAC,CAAC;YACX,MAAM,UAAU,GAAG,aAAa,IAAI,CAAC,CAAC;YACtC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1C,MAAM,OAAO,GAAG,CAAC,GAAU,EAAQ,EAAE;oBACnC,CAAC,CAAC,cAAc,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;oBAC3C,MAAM,CAAC,GAAG,CAAC,CAAC;gBACd,CAAC,CAAC;gBACF,MAAM,WAAW,GAAG,GAAS,EAAE;oBAC7B,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;oBACnC,OAAO,EAAE,CAAC;gBACZ,CAAC,CAAC;gBACF,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACzB,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;gBACjC,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YAC7B,CAAC,CAAC,CAAC;YACH,yEAAyE;YACzE,uEAAuE;YACvE,wBAAwB;YACxB,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;gBAC3B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,mBAAmB,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACrE,CAAC,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC;YACvE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,uBAAuB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/D,OAAO,EAAE,IAAI,EAAE,CAAC;QAClB,CAAC;QAED,KAAK,CAAC,IAAI;YACR,MAAM,CAAC,GAAG,MAAM,CAAC;YACjB,IAAI,CAAC,CAAC;gBAAE,OAAO;YACf,MAAM,GAAG,IAAI,CAAC;YACd,2EAA2E;YAC3E,2EAA2E;YAC3E,wEAAwE;YACxE,2EAA2E;YAC3E,2EAA2E;YAC3E,0CAA0C;YAC1C,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjB,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;oBACjC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,6BAA6B,EAAE,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC1F,CAAC,CAAC,CAAC;YACL,CAAC;YACD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACjE,CAAC;KACF,CAAC;AACJ,CAAC"}